Acldiag Examples
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
Acldiag Examples
Acldiag Overview | Acldiag Remarks | Acldiag Syntax | Acldiag Examples
Example 1: Display the ACL of a user object in Active Directory
To display the ACL of a user object in Active Directory, type:
acldiag CN="Test Admin",CN=Users,DC=domain1,DC=test,DC=fourthcoffee,DC=com
Example 2: Display a Schema Analysis of a Computer Object in Active Directory
To display a schema analysis of a computer object in Active Directory, type:
acldiag CN=MACHINE-TEST,CN=Computers,DC=domain1,DC=test,DC=fourthcoffee,DC=com /schema
Example 3: Display ACL, Permissions, and Delegation Information for a Computer Object
To display the ACL, the effective permissions for all users and groups in the security descriptor, and the delegation analysis of a computer object in tab-delimited format, type:
acldiag CN=MACHINE-TEST,CN=Computers,DC=domain1,DC=test,DC=fourthcoffeeDC=com /chkdeleg /geteffective:* /tdo
Example 4: Reapply a Delegation Template to a Group Object
To reapply a delegation template to a group object, type:
acldiag CN="Domain Computers",CN=Users,DC=domain1,DC=test,DC=fourthcoffee,DC=com /chkdeleg /fixdeleg
See Also
Concepts
Acldiag Overview
Acldiag Remarks
Acldiag Syntax
Alphabetical List of Tools
Search Overview
Replmon Overview
Repadmin Overview
Movetree.exe
Ldp Overview
Dsastat Overview
Clonepr Overview
ADSI Edit (adsiedit.msc)